Product by Astro

    \@astrojs\/node

    4 known vulnerabilities in \@astrojs\/node (Astro), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in \@astrojs\/node (Astro)
    HighCVE-2026-25545

    Astro has Full-Read SSRF in error rendering via Host: header injection

    also in 1 other product

    8.6
    HighCVE-2026-27729

    Astro has memory exhaustion DoS due to missing request body size limit in Server Actions

    also in 1 other product

    5.9
    HighCVE-2026-29772

    Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

    also in 1 other product

    5.9
    HighCVE-2026-27829

    Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

    also in 1 other product

    6.5

    All products by Astro